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Abstract. Quantum states are very delicate, so it is likely some sort of quan- 
tum error correction will be necessary to build reliable quantum computers. 
The theory of quantum error-correcting codes has some close tics to and some 
striking differences from the theory of classical error-correcting codes. Many 
quantum codes can be described in terms of the stabilizer of the codewords. 
The stabilizer is a finite Abelian group, and allows a straightforward character- 
ization of the error-correcting properties of the code. The stabilizer formalism 
for quantum codes also illustrates the relationships to classical coding theory, 
particularly classical codes over GF(4), the finite field with four elements. 



1. Background: the need for error correction 

Quantum computers have a great deal of potential, but to realize that potential, 
they need some sort of protection from noise. 

Classical computers don't use error correction. One reason for this is that 
classical computers use a large number of electrons, so when one goes wrong, it is 
not too serious. A single qubit in a quantum computer will probably be just one, 
or a small number, of particles, which already creates a need for some sort of error 
correction. 

Another reason is that classical computers are digital: after each step, they 
correct themselves to the closer of or 1. Quantum computers have a continuum 
of states, so it would seem, at first glance, that they cannot do this. For instance, 
a likely source of error is over-rotation: a state a\0) + might be supposed to 
become a|0) + /3e''^|l}, but instead becomes a|0} + /3e'('^+*') |1}. The actual state 
is very close to the correct state, but it is still wrong. If we don't do something 
about this, the small errors will build up over the course of the computation, and 
eventually will become a big error. 

Furthermore, quantum states are intrinsically delicate: looking at one collapses 
it. a|0) -|-/3|1) becomes |0) with probability |ap and |1) with probability |/3p. The 
environment is constantly trying to look at the state, a process called decoherence. 
One goal of quantum error correction will be to prevent the environment from 
looking at the data. 

There is a well-developed theory of classical error-correcting codes, but it 
doesn't apply here, at least not directly. For one thing, we need to keep the phase 
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correct as well as correcting bit flips. There is another problem, too. Consider the 
simplest classical code, the repetition code: 

(1) ^ 000 

(2) 1 111 

It will correct a state such as 010 to the majority value (becoming 000 in this case).|^ 
We might try a quantum repetition code: 

(3) ^ (g> 1^) \^) 

However, no such code exists because of the No-Cloning theorem ||^, 2C]: 



Theorem 1 (No-Cloning). There is no quantum operation that takes a state 
I?/;) to \tp) (g) Itp) for all states {ip). 

Proof. This fact is a simple consequence of the linearity of quantum mechan- 
ics. Suppose we had such an operation and ji/i) and |0) are distinct. Then, by the 
definition of the operation, 

(4) \^) ^ 1^)1^) 

(5) 10) ^ 10)10) 

(6) |^) + |0)^(|V.) + |0))(|^)-H|0)). 

(Here, and frequently below, I omit normalization, which is generally unimportant.) 
But by linearity, 

(7) + + 
This differs from (^ by the crossterm 

(8) |V)|0) + |0)|^). 

□ 

2. The nine-qubit code 



To solve these problems, we will try a variant of the repetition code [16 



(9) |0) ^ |0) = (1000) + |111)) (1000) + |111)) (1000) + |111)) 

(10) |1) ^ |T) = (1000) - 1111)) (1000) - 1111)) (1000) - 1111)) 

Note that this does not violate the No-Cloning theorem, since an arbitrary 
codeword will be a linear superposition of these two states 

(11) a|0) + /3|T) ^ [a(|000) + |111)) + /3(|000) - \ni))f^ . 

The superposition is linear in a and (3. The complete set of codewords for this (or 
any other) quantum code form a linear subspace of the Hilbert space, the coding 
space. 

The inner layer of this code corrects bit flip errors: We take the majority within 
each set of three, so 

(12) |010) ± |101) ^ |000) ± |111). 



^Actually, a classical digital computer is using a repetition code - each bit is encoded in 
many electrons (the repetition), and after each time step, it is returned to the value held by the 
majority of the electrons (the error correction). 
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Identity / — 

Bit Flip X = 

Phase Flip Z = 

Bit & Phase Y = 




The outer layer corrects phase flip errors: We take the majority of the three signs, 
so 

(13) + |-))(|-) - |-))(|-) + I-)) - + |-))(|-) + |-))(|-) + I-)). 

Since these two error correction steps are independent, the code also works if there 
is both a bit flip error and a phase flip error. 

Note that in both cases, we must be careful to measure just what we want to 
know and no more, or we would collapse the superposition used in the code. PU 
discuss this in more detail in section ^ 

The bit flip, phase flip, and combined bit and phase flip errors are important, so 
let's take a short digression to discuss them. We'll also throw in the identity matrix, 
which is what we get if no error occurs. The deflnitions of these four operators are 
given in table |l|. The factor of i in the deflnition of Y has little practical signiflcance 
— overall phases in quantum mechanics are physically meaningless — but it makes 
some manipulations easier later. It also makes some manipulations harder, so either 
is a potentially reasonable convention. 

The group generated by tensor products of these 4 operators is called the Pauli 
group. X, Y, and Z anticommute: XZ = —ZX (also written {X,Z} = 0). Sim- 
ilarly, {X, y} = and {Y, Z} ~ 0. Thus, the rt-qubit Pauli group Pn consists of 
the 4" tensor products of /, X, Y, and Z, and an overall phase of ±1 or ±i, for 
a total of 4"+^ elements. The phase of the operators used is not generally very 
important, but we can't discard it completely. For one thing, the fact that this is 
not an Abelian group is quite important, and we would lose that if we dropped the 
phase! 

Vn is useful because of its nice algebraic properties. Any pair of elements of 
Vn either commute or anticommute. Also, the square of any element of Vn is ±1. 
We shall only need to work with the elements with square +1, which are tensor 
products of /, X, Y, and Z with an overall sign ±1; the phase i is only necessary 
to make Vn a group. Deflnc the weight of an operator in Vn to be the number of 
tensor factors which are not /. Thus, X (E)Y (g) I has weight 2. 

Another reason the Pauli matrices are important is that they span the space 
of 2 X 2 matrices, and the n-qubit Pauli group spans the space of 2" x 2" matrices. 
For instance, if we have a general phase error 
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(again, the overaU phase does not matter) , we can write it as 

6 6 

(15) iZ0/2 = cos - / - ism- Z. 

It turns out that our earher error correction procedure will also correct this 
error, without any additional effort. For instance, the earlier procedure might use 
some extra qubits {ancilla qubits) that are initialized to |0) and record what type 
of error occurred. Then we look at the ancilla and invert the error it tells us: 

(16) Z (a|0) + /3|T}) ® |0)a„c ^ Z {a\Q) + /3|T)) ® |Z)a„c 

(17) (a|0)+/3|T)) ® |Z)anc 

(18) / (a|0) + /3|T)) ® |0)a„c / (a|0) + /3|T)) ® |no error)anc 

(19) -> (a|0) + /3|T)) ® |no error)a„c 

When the actual error is -R0/2, recording the error in the ancilla gives us a 
superposition: 

6 6 

(20) cos- /(a|0)+/3|T)) ® I no error)anc ~ * sin — Z (ajO) +/3|1)) ® |Z)anc 

Then we measure the ancilla, which with probability sin^ 6/2 gives us 

(21) Z(a|0) +/3|T)) ® |Z)anc, 

and with probability cos^ 6/2 gives us 

(22) / (a|0) + /3|T)) |no error)a„c. 

In each case, inverting the error indicated in the ancilla restores the original state. 
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It is easy to see this argument works for any linear combination of errors [16, 



Theorem 2. If a quantum code corrects errors A and B , it also corrects any 
linear combination of A and B. In particular, if it corrects all weight t Pauli errors, 
then the code corrects all t-qubit errors. 

So far, we have only considered individual unitary errors that occur on the 
code. But we can easily add in all possible quantum errors. The most general 
quantum operation, including decoherence, interacts the quantum state with some 
extra qubits via a unitary operation, then discards some qubits. This process can 
turn pure quantum states into mixed quantum states, which are normally described 
using density matrices. We can write the most general operation as a transformation 
on density matrices 

(23) p^Y^^^P^l 

i 

where the EiS are normalized so ^ -^l-Ei — I. The density matrix p can be con- 
sidered to represent an ensemble of pure quantum states \ip), each of which, in 
this case, should be in the coding space of the code. Then this operation simply 
performs the following operation on each \^): 

(24) IV') E^\%Ij) with probability \E^\ip)\^ . 

If we can correct each of the individual errors Ei, then we can correct this general 
error as well. For instance, for quantum operations that only affect a single qubit 
of the code, Ei will necessarily be in the linear span of /, X , Y , and Z, so we can 
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correct it. Thus, in the statement of theorem g, "aU i-qubit errors" reaUy does 
apply to all i-qubit errors, not just unitary ones. 

We can go even further. It is not unreasonable to expect that every qubit in 
our nine-qubit code will be undergoing some small error. For instance, qubit i 
experiences the error / + eEi, where Ei is some single-qubit error. Then the overall 
error is 

(25) + eE,) = / + e (£;i ® + / ® ^2 ® + . . . ) + O(e') 

That is, to order e, the actual error is the sum of single-qubit errors, which we 
know the nine-qubit code can correct. That means that after the error correction 
procedure, the state will be correct to O(e^) (when the two-qubit error terms begin 
to become important). While the code cannot completely correct this error, it still 
produces a significant improvement over not doing error correction when e is small. 
A code correcting more errors would do even better. 

3. General properties of quantum error-correcting codes 

Let us try to understand what properties are essential to the success of the nine- 
qubit code, and derive conditions for a subspace to form a quantum error-correcting 
code. 

One useful feature was linearity, which will be true of any quantum code. We 
only need to correct a basis of errors (/, X, Y, and Z in the one-qubit case), and 
all other errors will follow, as per theorem ^j. 

In any code, we must never confuse |0) with |1), even in the presence of errors. 
That is, E\0) is orthogonal to F\l): 

(26) mE^F\l) = 0. 

It is sufficient to distinguish error E from error F when they act on |0) and 
Then a measurement will tell us exactly what the error is and we can correct it: 

(27) (0|#i^|0) = (T\E^F\1) = 
for E^F. 

But ( |2^ ) is not necessary: in the nine-qubit code, we cannot distinguish between 
Zi and Z2, but that is OK, since we can correct either one with a single operation. 
To understand the necessary condition, it is helpful to look at the operators -Fi = 
{Zi +^2)72 and F2 ^ {Zi — Z2) /2 instead of Zi and Z2. Fi and F2 span the same 
space as Zi and Z2, so Shor's code certainly corrects them; let us try to understand 
how. When we use the Fs as the basis errors, now equation (^) is satisfied. That 
means we can make a measurement and learn what the error is. We also have to 
invert it, and this is a potential problem, since Fi and F2 are not unitary. However, 
Fi acts the same way as Zi on the coding space, so z| suffices to invert Fi on the 
states of interest. F2 acts the same way as the operator on the coding space. We 
can't invert this, but we don't need to — since F2 annihilates codewords, it can 
never contribute a component to the actual state of the system. 

The requirement to invert the errors produces a third condition: 

(28) (0|£;t£;|o) = (T|£;t£;|T). 

Either this value is nonzero, as for Fi, in which case some unitary operator will act 
the same way as E on the coding space, or it will be zero, as for F2, in which case 
E annihilates codewords and never arises. 
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These arguments show that if there is some basis for the space of errors for 
which equations (26), (p7|), and ( p8| ) hold, then the states |0) and |1) span a quantum 



error-correcting code. Massaging these three equations together and generahzing 
to multiple encoded qubits, we get the following theorem |TT| : 

Theorem 3. Suppose £ is a linear space of errors acting on the Hilbert space 
TL. Then a subspace C of Ti forms a quantum error- correcting code correcting the 
errors £ iff 

(29) {m^E\^) = C{E) 

for all E £ £. The function C{E) does not depend on the state |?/'}. 

Proof. Suppose {Ea} is a basis for £ and {IV'i)} is a basis for C. By setting 
E and equal to the basis elements and to the sum and difference of two basis 
elements (with or without a phase factor z), we can see that (^9|) is equivalent to 

(30) {1l>^\EiE^\^l^J) = Cab5,J, 

where Cab is a Hermitian matrix independent of i and j. 

Suppose equation (^0|) holds. We can diagonalize Cab- This involves choosing 
a new basis {Fa} for £, and the result is equations (p6|), (|27|), and (p8|). The 
arguments before the theorem show that we can measure the error, determine it 
uniquely (in the new basis), and invert it (on the coding space). Thus, we have a 
quantum error-correcting code. 

Now suppose we have a quantum error-correcting code, and let \^) and |0) be 
two distinct codewords. Then we must have 

(31) {m^E\^) = m^E\4>) 

for all E. That is, (^) must hold. If not, E changes the relative size of |V') and 
\(f)). Both + 10) and |V') + c\<f)) are valid codewords, and 

(32) i?(|V) + |0))-Af(|^)+c|(/.)), 
where iV is a normalization factor and 

(33) c={^\E^E\i:)/{(l>\E^E\4>). 

The error E will actually change the encoded state, which is a failure of the code, 
unless c — 1. 

□ 

There is a slight subtlety to the phrasing of equation (p9|). We require £ to be 
a linear space of errors, which means that it must be closed under sums of errors 
which may act on different qubits. In contrast, for a code that corrects t errors, 
in (^, it is safe to consider only Ea and Eb acting on just t qubits. We can restrict 
even further, and only use Pauli operators as Ea and Eb, since they will span the 
space of t-qubit errors. This leads us to a third variation of the condition: 

(34) {i:\E\i,) = C'{E), 

where E is now any operator acting on 2t qubits (that is, it replaces E^Eb in (pO|)). 
This can be easily interpreted as saying that no measurement on 2t qubits can learn 
information about the codeword. Alternatively, it says we can detect up to 2t errors 
on the code without necessarily being able to say what those errors are. That is, 
we can distinguish those errors from the identity. 



AN INTRODUCTION TO QUANTUM ERROR CORRECTION 



7 



If the matrix Cab in (^) has maximum rank, the code is called nondegenerate. 
If not, as for the nine-qubit code, the code is degenerate. In a degenerate code, 
different errors look the same when acting on the coding subspace. 

For a nondegenerate code, we can set a simple bound on the parameters of 
the code simply by counting states. Each error E acting on each basis codeword 
lipi) produces a linearly independent state. All of these states must fit in the full 
Hilbert space of n qubits, which has dimension 2". If the code encodes k qubits, 
and corrects errors on up to t qubits, then 



(35) 2'= <2" 




The quantity in parentheses is the number of errors of weight t or less: that is, the 
number of tensor products of /, X, and Z that are the identity in all but t or 
fewer places. This inequality is called the quantum Hamming bound. While the 
quantum Hamming bound only applies to nondegenerate codes, we do not know of 
any codes that beat it. 

For t = 1, k = 1, the quantum Hamming bound tells us n > 5. In fact, there 
is a code with n = 5, which you will see later. A code that corrects t errors is said 
to have distance 2t + 1, because it takes 2t + 1 single-qubit changes to get from 
one codeword to another. We can also define distance as the minimum weight of 
an operator E that violates equation (|3^) (a definition which also allows codes of 
even distance) . A quantum code using n qubits to encode k qubits with distance d 
is written as an [[n, k, d]] code (the double brackets distinguish it from a classical 
code). Thus, the nine-qubit code is a [[9,1,3]] code, and the five-qubit code is a 
[[5,1,3]] code. 

We can also set a lower bound telling us when codes exist. I will not prove this 
here, but an [[n, fc, d]] code exists when 




(36) > 3^ . 2'^- < 2" 



(known as the quantum Gilbert- Varshamov bound |^ ) . This differs from the quan- 
tum Hamming bound in that the sum goes up to d — 1 (which is equal to 2t) rather 
than stopping at t. 



Theorem 4. A quantum [[n, fc, d]] code exists when ^3q ) holds. Any nondegen- 
erate [[n, fc,d]] code must satisfy (p^. For large n, R = k/n and p = d/2n fixed, 
the best nondegenerate quantum codes satisfy 

(37) 1 - 2plog2 3 - H{2p) <R<1 - p\og^ 3 - Hip), 

where i?(x) — — xlogj a; — (1 — a;) log2(l — x). 



One further bound, known as the Knill-Laflamme bound [11] or the quan- 
tum Singleton bound, applies even to degenerate quantum codes. For an [[n, k, d]] 
quantum code, 

(38) n~k>2d-2. 

This shows that the [[5, 1, 3]] code really is optimal — a [[4, 1, 3]] code would violate 
this bound. 
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I will not prove the general case of this bound, but the case of fc = 1 can be 
easily understood as a consequence of the No-Cloning theorem. Suppose r qubits 
of the code are missing. We can substitute |0) states for the missing qubits, but 
there are r errors on the resulting codeword. The errors are of unknown type, but 
all the possibilities are on the same set of r qubits. Thus, all products E^Eh in 
condition ( ^0| ) have weight r or less, so this sort of error (an "erasure" error |Q) 
can be corrected by a code of distance r + 1. Now suppose we had an [[n, 1, d]] code 
with n < 2d — 2. Then we could split the qubits in the code into two groups of 
size at most d — I. Each group would have been subject to at most d — 1 erasure 
errors, and could therefore be corrected without access to the other group. This 
would produce two copies of the encoded state, which we know is impossible. 

4. Stabilizer codes 

Now let us return to the nine-qubit code, and examine precisely what we need 
to do to correct errors. 

First, we must determine if the first three qubits are all the same, and if not, 
which is different. We can do this by measuring the parity of the first two qubits 
and the parity of the second and third qubits. That is, we measure 

(39) Z Z / and / ® Z ® Z. 

The first tells us if an X error has occurred on qubits one or two, and the second 
tells us if an X error has occurred on qubits two or three. Note that the error 
detected in both cases anticommutes with the error measured. Combining the two 
pieces of information tells us precisely where the error is. 

We do the same thing for the other two sets of three. That gives us four more 
operators to measure. Note that measuring Z ® Z gives us just the information we 
want and no more. This is crucial so that we do not collapse the superpositions 
used in the code. We can do this by bringing in an ancilla qubit. We start it in the 
state |0) + |1) and perform controUcd-Z operations to the first and second qubits 
of the code: 

(40) (|0) + |l))^c<,,,|a6c) ^c,fc, (|0)|a6c) + (-l)"®"]!) |a6c)) 

abc abc 

(41) =Y.Cabc (|0) + (-l)P-ty('^>^)|l)) \abc). 

abc 

At this point, measuring the ancilla in the basis |0) ± |1) will tell us the eigenvalue 
of Z ® Z ® /, but nothing else about the data. 

Second, we must check if the three signs are the same or different. We do this 
by measuring 

(42) X(g)X^X(E)X(g)X(g)X(g)I(E)I(E)I 
and 

(43) I(S)I(E)I(g)X(g)X(g)X(S)X(g)X(g)X. 

This gives us a total of 8 operators to measure. These two measurements detect 
Z errors on the first six and last six qubits, correspondingly. Again note that the 
error detected anticommutes with the operator measured. 
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Table 2. The stabilizer for the nine-qubit code. Each column 
represents a different qubit. 



This is no coincidence: in each case, we are measuring an operator M which 
should have eigenvalue +1 for any codeword: 

(44) M\^) = It/;). 

If an error E which anticommutes with M has occurred, then the true state is E\ip), 
and 

(45) M {E\%l))) = ~EM\il:) = -E\^). 

That is, the new state has eigenvalue —1 instead of +1. We use this fact to correct 
errors: each single-qubit error E anticommutes with a particular set of operators 
{A/}; which set, exactly, tells us what E is. 

In the case of the nine-qubit code, we cannot tell exactly what E is, but it does 
not matter. For instance, we cannot distinguish Zi and Z2 because 

(46) ZiZ2\^)^\^) ^ Zi\i,) = Z2\^). 

This is an example of the fact that the nine-qubit code is degenerate. 

Table || summarizes the operators we measured. These 8 operators generate an 
Abelian group called the stabilizer of the nine-qubit code. The stabilizer contains 
all operators M in the Pauli group for which M\'il>) = {t/j) for all It/j) in the code. 

Conversely, given an Abelian subgroup S of the Pauli group Vn (which, if you 
recall, consists of tensor products of /, X, Y, and Z with an overall phase of ±1, ±j), 
we can define a quantum code T{S) as the set of states for which AI\ip) — 
for all M Q S. S must be Abelian and cannot contain —1, or the code is trivial: If 
M,N€S, 

(47) MN\i;) = M\i}) = 

(48) NM\iP) = N\iP) = \^) 
so 

(49) [M, iV]|^) = MN\i:} - NM\iP) = 0. 

Since elements of the Pauli group either commute or anticommute, [Af, N] = 0. 
Clearly, if M = — 1 G S", there is no nontrivial for which M|-i/)) = 

If these conditions are satisfied, there will be a nontrivial subspace consisting of 
states fixed by all elements of the stabilizer. We can tell how many errors the code 
corrects by looking at operators that commute with the stabilizer. We can correct 
errors E and F if either F & S {so E and F act the same on codewords), or if 
3M e S s.t. {il/, E^'F} — 0, in which case measuring the operator M distinguishes 
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between E and F. If the first condition is ever true, the stabilizer code is degenerate; 
otherwise it is nondegenerate. 

We can codify this by looking at the normalizer N{S) of S in the Pauli group 
(which is in this case equal to the centralizer, composed of Pauli operators which 
commute with S) . The distance d of the code is the minimum weight of any operator 
in7V(5)\5 §§. 

Theorem 5. Let S be an Abelian subgroup of order 2°' of the n-qubit Pauli 
group, and suppose —1 ^ S. Let d be the minimum weight of an operator in 
N{S) \ S . Then the space of states T{S) stabilized by all elements of S is an 
[[n, n " a, d]] quantum code. 

To correct errors of weight (d — 1)/2 or below, we simply measure the generators 
of S. This will give us a list of eigenvalues, the error syndrome, which tells us 
whether the error E commutes or anticommutes with each of the generators. The 
error syndromes of E and F are equal iff the error syndrome of E'^ F is trivial. For 
a nondegenerate code, the error syndrome uniquely determines the error E (up to 
a trivial overall phase) — the generator that anticommutes with E'^F distinguishes 
E from F. For a degenerate code, the error syndrome is not unique, but error 
syndromes are only repeated when E^^ F G S, implying E and F act the same way 
on the codewords. 

If the stabilizer has a generators, then the code encodes n — a qubits. Each 
generator divides the allowed Hilbert space into +1 and —1 eigenspaces of equal 
sizes. To prove the statement, note that we can find an element G of the Pauli group 
that has any given error syndrome (though G may have weight greater than {d — 
l)/2, or even greater than d). Each G maps T{S) into an orthogonal but isomorphic 
subspace, and there are 2" possible error syndromes, so T{S) has dimension at most 
2"/2°. In addition, the Pauli group spans C/(2"), so its orbit acting on any single 
state contains a basis for Ti. Every Pauli operator has some error syndrome, so 
T{S) has dimension exactly 2"~". 

5. Some other important codes 

Stabilizers make it easy to describe new codes. For instance, we can start from 
classical coding theory, which describes a linear code by a generator matrix or its 
dual, the parity check matrix. Each row of the generator matrix is a codeword, 
and the other codewords are all linear combinations of the rows of the generator 
matrix. The rows of the parity check matrix specify parity checks all the classical 
codewords must satisfy. (In quantum codes, the stabilizer is closely analogous to 
the classical parity check matrix.) One well-known code is the seven-bit Hamming 
code correcting one error, with parity check matrix 

/ 1 1 1 1 \ 
(50) 1 1 1 1 0. 

\ 1 1 1 1 / 

If we replace each 1 in this matrix by the operator Z , and by /, we are really 
changing nothing, just specifying three operators that implement the parity check 
measurements. The statement that the classical Hamming code corrects one error 
is the statement that each bit flip error of weight one or two anticommutes with 
one of these three operators. 
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Z Z Z Z 1 1 I 

Z Z I 1 Z Z I 

Z I Z 1 Z I z 

X X X X I I I 

XXI I X X I 

X I X I X I X 

Table 3. Stabilizer for the seven-qubit code. 



Now suppose we replace each 1 by X instead of Z. We again get three operators, 
and they will anticommute with any weight one or two Z error. Thus, if we make a 
stabilizer out of the three Z operators and the three X operators, as in table we 



get a code that can correct any single qubit error |18| . X errors are picked up by 
the first three generators, Z errors by the last three, and Y errors are distinguished 
by showing up in both halves. Of course, there is one thing to check: the stabilizer 
must be Abelian; but that is easily verified. The stabilizer has 6 generators on 7 
qubits, so it encodes 1 qubit — it is a [[7, f , 3]] code. 

In this example, we used the same classical code for both the X and Z genera- 
tors, but there was no reason we had to do so. We could have used any two classical 
codes Ci and C2 |5|, |l9| . The only requirement is that the X and Z generators com- 
mute. This corresponds to the statement that C Ci (C^ is the dual code to C2 , 
consisting of those words which are orthogonal to the codewords of C2). If Ci is an 
[n, fci, di] code, and C2 is an [n, ^2, ^2] code (recall single brackets means a classical 
code), then the corresponding quantum code is an [[n, fci-|-fc2— n, min(di, (^2)]] code.^ 
This construction is known as the CSS construction after its inventors Caldcrbank, 
Shor, and Steane. 

The codewords of a CSS code have a particularly nice form. They all must 
satisfy the same parity checks as the classical code Ci, so all codewords will be 
superpositions of words of Ci. The parity check matrix of C2 is the generator 
matrix of , so the X generators of the stabilizer add a word of to the state. 
Thus, the codewords of a CSS code are of the form 

(51) 1" + ^)' 

where u € Ci (C^ C Ci, so u -I- ui e Ci). If we perform a Hadamard transform 

(52) |0)^|0) + |1) 

(53) |1)^|0)-|1) 

on each qubit of the code, we switch the Z basis with the X basis, and Ci with C2, 
so the codewords are now 

(54) 1" + ^) ("eC2). 

Thus, to correct errors for a CSS code, we can measure the parities of Ci in the Z 
basis, and the parities of C2 in the X basis. 

Another even smaller quantum code is the [[5, 1, 3]] code I promised earher 



13 1 . Its stabilizer is given in table M. I leave it to you to verify that it commutes 



^In fact, the true distance of the code could be larger than expected because of the possibihty 
of degeneracy, which would not have been a factor for the classical codes. 
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X 


z 


z 


X 


I 


I 


X 


z 


z 


X 


X 


I 


X 


z 


z 


z 


X 


I 


X 


z 



Table 4. The stabilizer for the five-qubit code. 



and actually does have distance 3. You can also work out the codewords. Since 
multiplication by M G S* merely rearranges elements of the group S*, the sum 

(55) (E^MI<^) 

\Afes / 

is in the code for any state \(j)). You only need find two states \4>) for which is 
nonzero. Note that as well as telling us about the error-correcting properties of the 
code, the stabilizer provides a more compact notation for the coding subspace than 
listing the basis codewords. 

A representation of stabilizers that is often useful is as a pair of binary matrices, 
frequently written adjacent with a line between them |Q. The first matrix has a 1 
everywhere the stabilizer has an X or a 1", and a elsewhere; the second matrix 
has a 1 where the stabilizer has a F or a Z. Multiplying together Pauli operators 
corresponds to adding the two rows for both matrices. Two operators M and 
TV commute iff their binary vector representations (ai|6i), (02,62) are orthogonal 
under a symplectic inner product: 0162 + ^102 = 0. For instance, the stabilizer for 
the five-qubit code becomes the matrix 

M 



1 

1 / 



(56) 



/I 








1 








1 


1 








1 








1 








1 


1 


1 





1 

















1 


V 


1 





1 





1 












6. Codes over GF(4) 

I will finish by describing another connection to classical coding theory. Fre- 
quently, classical coding theorists consider not just binary codes, but codes over 
larger finite fields. One of the simplest is GF(4), the finite field with four elements. 
It is a field of characteristic 2, containing the elements {0, 

(57) = 1, w + = 1 

It is also useful to consider two operations on GF(4). One is conjugation, which 
switches the two roots of the characteristic polynomial + x + 1: 

(58) T=l uj^u'^ 

(59) = IJ^^uj 

The other is trace, tr x is the trace of the linear operator "multiplication by a;" 
when GF(4) is considered as a vector space over Z2: 

(60) trO = trl = 

(61) trcj = trtj^ = l 
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Stabilizers GF(4) 



I 
Z 
X 
Y 

tensor products 

multiplication addition 
[M, iV] = tr(Af • iV) = 

N{S) dual 
Table 5. Connections between stabilizer codes and codes over GF(4). 




1 

J" 

vectors 



Stabilizer codes make extensive use of the Pauli group Vn- We can make a 
connection between stabilizer codes and codes over GF(4) by identifying the four 
operators /, X, F, and Z with the four elements of GF(4), as in table ^ 

The commutativity constraint in the Pauli group becomes a symplectic inner 
product between vectors in GF(4). The fact that the stabilizer is Abelian can be 
phrased in the language of GF(4) as the fact that the code must be contained in its 
dual with respect to this inner product. To determine the number of errors corrected 
by the code, we must examine vectors which are in the dual (corresponding to N{S)) 
but not in the code (corresponding to S). 

The advantage of making this correspondence is that a great deal of classi- 
cal coding theory instantly becomes available. Many classical codes over GF(4) 
are known, and many of them are self-dual with respect to the symplectic inner 
product, so they define quantum codes. For instance, the five-qubit code is one 
such — in fact, it is just a Hamming code over GF(4)! Of course, mostly classical 
coding theorists consider linear codes (which are closed under addition and scalar 
multiplication) , whereas in the quantum case we wish to consider the slightly more 
general class of additive GF(4) codes (that is, codes which are closed under addition 
of elements, but not necessarily scalar multiplication). 



7. Fault-Tolerant Quantum Computation 

Hopefully, this paper has given you an understanding of quantum error-correct- 
ing codes, but there is still a major hurdle before the goal of making quantum 
computers resistant to errors. You must also understand how to perform opera- 
tions on a state encoded in a quantum code without losing the code's protection 
against errors, and how to safely perform error correction when the gates used are 
themselves noisy. For a full discussion of this problem and its resolutions, see |l4| 

or ra. 



Shor presented the first protocols for fault-tolerant quantum computation |17|. 
While those protocols can be extended to work for arbitrary stabilizer codes, in- 
cluding those with multiple encoded qubits per block [^, the gates which can be 
performed easily on the code arise from symmetries of the stabilizer. The stabilizer 
of the seven-qubit code has a particularly large symmetry group and therefore is 
particularly good for fault-tolerant computation. 
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When the error rate per gate is low enough, encoding a state in a quantum 
code and performing fault-tolerant operations will reduce the effective error rate. 
By concatenating the seven-qubit code or another code (i.e., encoding each qubit 
of the code with another copy of the seven-qubit code, and possibly repeating the 
procedure multiple times), we can compound this improvement, giving a threshold 
result ^ 10, 12 1 : if the error rate is below some threshold value, concatenating 
a code allows us to perform arbitrarily long fault-tolerant quantum computations, 
with overhead that is polylogarithmic in the length of the computation. 

8. Summary (Quantum Error Correction Sonnet) 

We cannot clone, perforce; instead, we split 
Coherence to protect it from that wrong 
That would destroy our valued quantum bit 
And make our computation take too long. 
Correct a flip and phase - that will suffice. 
If in our code another error's bred. 
We simply measure it, then God plays dice. 
Collapsing it to X or Y or Zed. 
We start with noisy seven, nine, or five 
And end with perfect one. To better spot 
Those flaws we must avoid, we first must strive 
To find which ones commute and which do not. 
With group and eigenstate, we've learned to fix 
Your quantum errors with our quantum tricks. 
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